Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          u8JYqAZcphT4C7I6Go6NN44RnUjuFR0T67TYCPCHt7o=
Subject key identifier:   6D:BA:5C:9E:66:3F:6F:D4:76:BF:19:63:6A:31:63:9B:4E:26:49:23
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       019F93C92321012E00C96DB436DBB0BF396E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          132B
Signing time:             Fri 24 Jul 2026 11:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:00 +0000
Files and hashes:         1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
                          2: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
                          3: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: Gw3dKeOpeaLPBvYRbzmhs5qIWijuhFaGp1YOav7owxc=)
                          4: az8-qmAm__Q2vWY0AcJPLxKPa7w.roa (hash: wZzIfzMKAO+r012Fp/hJId8drWxI5XCw8K4AvtAAvEM=)
                          5: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
                          6: ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa (hash: QvdoLk4yxysIF/RBd4WT88j/9RIybsVbv3Yb9pLmzK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:23:21:01:2e:00:c9:6d:b4:36:db:b0:bf:39:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: Jul 24 11:01:00 2026 GMT
            Not After : Jul 25 11:01:00 2026 GMT
        Subject: CN=6dba5c9e663f6fd476bf19636a31639b4e264923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:a7:97:bf:84:fe:cd:b5:5a:86:26:91:4d:
                    2c:85:ba:68:a6:3e:36:2e:f5:a7:11:77:11:c8:a1:
                    d4:70:8b:09:48:0c:18:26:98:9e:18:8c:c2:91:0f:
                    6f:d4:97:fc:01:89:b4:20:a0:7a:b7:29:2d:fc:83:
                    69:12:ac:71:27:9c:e4:ab:9d:77:27:74:82:37:a5:
                    3f:54:17:96:6a:c2:c0:9b:2a:8f:0d:b0:f7:35:d3:
                    be:72:ff:f5:fa:32:19:d1:4e:8b:15:9b:66:10:95:
                    60:6d:ab:a5:06:b9:a8:79:23:74:c9:69:26:ae:da:
                    38:86:da:cb:f0:00:84:ea:15:7a:e6:13:8b:ac:0a:
                    0a:6b:c5:20:eb:19:89:38:be:06:0c:dd:be:94:74:
                    b0:02:a5:a5:a9:6b:c2:cf:50:64:7f:c1:60:c5:eb:
                    21:9c:b6:39:47:c5:b8:fc:50:e3:41:c9:f9:be:cd:
                    5a:3d:1f:93:10:d7:5a:e9:6c:61:65:21:ce:21:66:
                    66:1f:bc:3f:51:98:c1:d2:dc:4e:2f:aa:5e:5d:86:
                    0a:e7:85:38:78:08:ee:ec:e8:46:e2:63:d1:bc:7c:
                    bb:ca:3c:ee:eb:e1:37:7a:00:ec:23:f5:75:ca:be:
                    0a:e7:16:81:02:12:dd:a8:6e:36:65:ce:bc:38:e4:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BA:5C:9E:66:3F:6F:D4:76:BF:19:63:6A:31:63:9B:4E:26:49:23
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:08:5f:5b:89:1e:eb:63:81:1b:44:31:0d:76:70:7c:90:48:
         fc:26:f1:d6:31:93:52:d8:d9:ee:ee:63:95:ea:92:3b:8b:f5:
         1c:93:59:97:3d:c9:26:35:16:41:ae:04:4d:88:8b:64:50:dc:
         f9:74:96:2a:17:4b:03:76:31:0b:12:12:11:4c:88:0f:0d:33:
         9f:84:ee:c9:16:ba:65:28:5a:e3:f9:7b:2c:03:88:7a:8b:46:
         59:9d:a1:f4:85:ca:23:29:b0:ef:f6:49:99:b2:5b:c8:a7:ce:
         24:76:d6:2e:51:5a:23:5a:65:a9:95:46:4e:1f:09:4d:17:74:
         93:c3:5b:b7:33:b5:cf:b5:47:2c:ef:ee:0d:5a:93:b0:b2:67:
         a4:26:6c:0d:e9:db:64:66:c1:ec:1f:53:aa:66:4d:da:db:35:
         03:90:dc:45:b1:75:ad:cc:ba:e8:ba:77:88:0a:0b:13:99:6d:
         80:ca:d7:ef:fe:33:84:35:24:2c:82:50:63:4b:d8:a1:a2:50:
         1b:83:8a:3b:66:80:84:b4:c6:58:18:d0:50:b4:69:37:7f:e9:
         6d:51:7c:24:18:73:b0:7e:92:59:cd:dc:1d:6d:ad:9d:ee:9a:
         83:41:1f:08:5d:8a:dc:e9:74:0b:66:25:16:e1:ec:84:b8:06:
         fb:0c:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:07 2026 by rpki-client